GT 3.9.4 GSI-OpenSSH: Developer's Guide

Introduction

[introduction to developers with reference to General Toolkit Developer's Guide for coding guidelines, porting guide, etc.]

Architecture and design overview

[link to architecture and design docs]

Public interface

The semantics and syntax of the APIs and WSDL for the component, along with descriptions of domain-specific structured interface data, can be found in the public interface guide.

Usage scenarios

[describe how to use the programatic interfaces of the component, provide examples]

Tutorials

[add links to any tutorials - if no tutorials, say "There are no tutorials available at this time"]

Feature summary

Features new in release 3.9.4

  • This is the first Globus Toolkit release that includes GSI-enabled OpenSSH.

Other Supported Features

  • The gsissh command provides a secure remote login service with forwarding of X.509 proxy credentials.
  • The gsiscp and gsisftp commands provide a secure file transfer service, authenticated with X.509 proxy credentials, mimicking the rcp/scp and ftp/sftp commands.
  • All standard OpenSSH features are supported, excluding Kerberos authentication. Kerberos authentication is not compatible with GSI-enabled OpenSSH.
  • The GSI-OpenSSH server can replace the standard system SSH server in typical environments.
  • If no username is given on the command-line, GSI-OpenSSH automatically determines the username that corresponds to the X.509 proxy certificate subject in the server's grid-mapfile.

Deprecated Features

  • None

Tested platforms

Tested Platforms for [component name]

  • platform #1
  • ...
  • platform #n

Backward compatibility summary

Protocol changes since GT version 3.2

  • GSI-enabled OpenSSH was not included in GT 3.2.

API changes since GT version 3.2

  • GSI-enabled OpenSSH was not included in GT 3.2.

Exception changes since GT version 3.2

  • Not applicable

Schema changes since GT version 3.2

  • Not applicable

Technology dependencies

GSI-enabled OpenSSH depends on the following GT components:

  • Pre-WS Authentication and Authorization

GSI-enabled OpenSSH depends on the following 3rd party software:

  • None

Security considerations

[describe security considerations relevant for this component]

Troubleshooting

[help for common problems developers may experience]

Related Documentation

[could link to pdfs and whitepapers about protocols, etc re: the component]